video-production
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
npx remotion previewandnpx remotion rendercommands to execute the video generation and rendering process from generated TypeScript code.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8). It ingests untrusted data from user prompts to define the structure, text, and scenes of the video. The skill does not implement boundary markers or instructions to ignore embedded commands, nor does it specify sanitization of the input text. The agent has the capability to execute subprocesses and generate code based on this data.- [EXTERNAL_DOWNLOADS]: The skill relies onnpxto dynamically fetch the Remotion framework and its dependencies from the npm registry. While npm is a well-known service, this involves downloading and executing external code at runtime.
Audit Metadata